critical
CVE-2023-6553
Backup Migration unauthenticated remote code execution through attacker-controlled includes in backup-heart.php
- Severity
- critical
- Affected product
- backup-backup
- Affected versions
- backup-backup ≤ 1.3.7
- Fixed in
- backup-backup 1.3.8
- Detection basis
- Component version range
- Shipped rule
- backup-backup: Backup Migration unauthenticated remote code execution through attacker-controlled includes in backup-heart.php
- Added to NewScan
- 2026-09-10
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints backup-backup from its response and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.